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FIG. 4 /V* 



TRANSMIT TO A COMPUTER AN APPLET 
HAVING A UNIQUE SESSION IDENTIFICATION 
AND A FIRST ENCRYPTION KEY 



RECEIVE FROM THE COMPUTER A LOGIN PACKET HAVING 
THE SESSION IDENTIFICATION, A USER NAME, A PASSWORD AND A 
FIRST HASH OF THE SESSION IDENTIFICATION, THE USER NAME, 
AND THE PASSWORD, WHEREIN THE SESSION IDENTIFICATION, 
THE USER NAME, AND THE PASSWORD ARE ENCRYPTED USING 
THE FIRST ENCRYPTION KEY 



UNENCRYPT THE SESSION IDENTIFICATION, 
THE USER'S NAME, AND THE PASSWORD 
CONTAINED IN THE PACKET 



RECEIVE FROM AN AUTHENTICATION PROVIDER 
A SECOND ENCRYPTION KEY 



HP 



ENCRYPT USING THE SECOND ENCRYPTION KEY 

AND TRANSMIT TO THE AUTHENTICATION 
PROVIDER THE USER NAME. AND THE PASSWORD 



RECEIVE FROM THE AUTHENTICATION PROVIDER A 
SECOND HASH OF THE PASSWORD AND A CHARACTER STRING 



DETERMINE FROM THE CHARACTER STRING 
IF THE PASSWORD IS CORRECT 
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FIG. 5 
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TRANSMIT TO A COMPUTER A FORM, AN APPLET , 
AND A SECOND UNIQUE SEQUENCE IDENTIFICATION 


< 


r 



RECEIVE FROM THE COMPUTER RESPONSE DATA TO 
THE FORM AND A HASH OF THE SECOND UNIQUE 

SEQUENCE IDENTIFICATION, THE USER PASSWORD, 
AND FIELDS AND VALUES ENTERED ON THE FORM 



AUTHENTICATE THE FIELDS AND THE 
VALUES ENTERED ON THE FORM 



